[Twisted-Python] "mind" introduced strangely in pb howto

[Hynek Schlawack]

Am 24.10.2013 um 09:02 schrieb Tobias Oberstein <tobias.oberstein at tavendo.de>:

>> I just tried to register so I could do that. When I clicked on the register button
>> after filling out the username/password fields my browser (firefox) brought
>> up a notice that the security certificate is invalid because of unavailable
>> issuance chain information. Knowing absolutely nothing about internet
>> security issues I thought I should mention this and ask if this is expected
>> behavior.
> 
> I wouldn't call that expected behavior, since
> 
> a) the certificate used on twistedmatrix.com contains (as it should) intermediate CA certs also (see attachments)

I’m not sure what you mean with “contains”? It certainly *relies* on one but unfortunately doesn’t send it along (yet):

$ openssl s_client -host www.twistedmatrix.com -port 443                                                                                                                                                                                                                                                                                                             
CONNECTED(00000003)
depth=0 /description=S7lbCt7N2R4t9o8J/C=US/CN=www.twistedmatrix.com/emailAddress=postmaster at twistedmatrix.com
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 /description=S7lbCt7N2R4t9o8J/C=US/CN=www.twistedmatrix.com/emailAddress=postmaster at twistedmatrix.com
verify error:num=27:certificate not trusted
verify return:1
depth=0 /description=S7lbCt7N2R4t9o8J/C=US/CN=www.twistedmatrix.com/emailAddress=postmaster at twistedmatrix.com
verify error:num=21:unable to verify the first certificate
verify return:1
---
Certificate chain
 0 s:/description=S7lbCt7N2R4t9o8J/C=US/CN=www.twistedmatrix.com/emailAddress=postmaster at twistedmatrix.com
   i:/C=IL/O=StartCom Ltd./OU=Secure Digital Certificate Signing/CN=StartCom Class 1 Primary Intermediate Server CA
---
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 235 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://twistedmatrix.com/pipermail/twisted-python/attachments/20131024/4ecb2560/attachment.pgp>